LoadModule authz_core_module modules/mod_authz_core.so
LoadModule mpm_event_module modules/mod_mpm_event.so

LoadModule unixd_module modules/mod_unixd.so
User www-data
Group www-data

LoadModule ssl_module modules/mod_ssl.so
SSLCertificateFile /usr/local/apache2/conf/tls/fullchain.pem
SSLCertificateKeyFile /usr/local/apache2/conf/tls/privkey.pem
SSLEngine On

LoadModule log_config_module modules/mod_log_config.so
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog /dev/stdout common
ErrorLog /dev/stderr

LoadModule http2_module modules/mod_http2.so
LoadModule rewrite_module modules/mod_rewrite.so

LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so

ServerName localhost
ServerAdmin ilari.suhonen@gmail.com

Listen 80
Listen 443

Protocols h2 h2c http/1.1 acme-tls/1

# Upgrade HTTP to HTTPS
<VirtualHost *:80>
  SSLEngine Off
  RewriteEngine On
  RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
</VirtualHost>

# --- oh yeah, it's reverse proxy time --- #

<VirtualHost *:443>
    ServerName lhf.blue

    SSLProxyEngine On
    ProxyPass / https://bluelhf.github.io/
    ProxyPassReverse / https://bluelhf.github.io/
</VirtualHost>

<VirtualHost *:443>
    ServerName pithos.lhf.blue

    ProxyPreserveHost On
    ProxyPass / http://pithos:8080/
    ProxyPassReverse / http://pithos:8080/
</VirtualHost>

<VirtualHost *:443>
    ServerName takapelastin.lhf.blue
    ProxyPass / http://takapelastin:8002/
    ProxyPassReverse / http://takapelastin:8002/
</VirtualHost>

<VirtualHost *:443>
    ServerName maven.lhf.blue

    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule ^/api/(.*) ws://reposilite:80/api/$1 [P,L]

    ProxyPass / http://reposilite:80/
    ProxyPassReverse / http://reposilite:80/
</VirtualHost>